PR
Product
Praisonaiagents
15
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 4Low 0
Watch
Add Praisonaiagents to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34938 | 10.0 | Apr 3 | PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code Affected: before 1.5.90 |
| CVE-2026-44335 | 9.8 | May 8 | SSRF bypass in PraisonAI Affected: before 1.6.32 |
| CVE-2026-40288 | 9.8 | Apr 14 | PraisonAI: Critical RCE via `type: job` workflow YAML Affected: before 1.5.140 |
| CVE-2026-34937 | 9.8 | Apr 3 | PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution Affected: before 1.5.90 |
| CVE-2026-40289 | 9.1 | Apr 14 | PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions Affected: before 1.5.140 |
Showing 5
